Trust Passport

Overview

The public registry renders a human-readable Passport from an exact signed certificate record. Passports remain empty until an authorized independent assessment issues a certificate.

• Bind claims to an issued certificate and defined scope.
• Verify the signature against a separately trusted issuer key.
• Check current status, expiry, and revocation online.
• Do not reuse a passport after material scope or authority changes.

Production checklist

• Keep credentials in a server-side secret store.
• Set explicit cost, latency, privacy, provider, and regional constraints.
• Capture route and evaluation evidence for incident review.
• Test timeouts, cancellation, fallback, and denied-policy paths before rollout.